$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft File: ZI5HI0RBcbar4W19wDDonAbwUNw.mft (raw, json) Hash identifier: MR+7IhjW03R7pHM+oa4TCThRquemCajNNPgbm+g0tBg= Subject key identifier: 3A:37:A8:B3:8C:F6:CF:18:F1:58:BF:23:D8:79:93:FF:49:71:53:6E Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft Manifest number: 0B05 Signing time: Wed 14 May 2025 19:24:01 +0000 Manifest this update: Wed 14 May 2025 19:24:01 +0000 Manifest next update: Wed 21 May 2025 19:24:01 +0000 Files and hashes: 1: ZI5HI0RBcbar4W19wDDonAbwUNw.crl (hash: SSzquIkT3QwPfqIl2SvEn5gx6hYble0jVQCXXb3WZYc=) 2: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (hash: J/8oDeRELdGOcwKCSIyZI2ucZRyx8ILa8bbFd/o79oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2827 (0xb0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: May 14 19:24:01 2025 GMT Not After : May 21 19:24:01 2025 GMT Subject: CN=6824edd1-6067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:d8:86:8d:8f:6a:2e:b3:f5:d1:05:c4:3d: d6:f3:48:af:d7:d5:46:87:ad:45:a6:39:bb:0b:84: 39:ee:f5:50:0e:84:bb:03:03:06:ef:b3:54:45:7e: 0f:00:66:71:14:bc:2f:87:ef:9b:3f:05:56:38:e4: fe:cd:fe:99:43:1f:73:cf:a1:f6:58:b5:b6:5f:67: 38:0c:56:b8:a9:cb:19:e0:9d:c6:68:17:7d:5c:a4: b9:a2:e0:ec:bb:d6:ca:d7:2a:29:4b:8d:f8:22:9e: 3c:9e:b4:ed:3a:4d:d4:a5:73:d9:b9:3c:2c:8e:1f: 90:16:b8:6c:46:b3:a8:51:39:94:e3:e5:c6:aa:30: 56:07:a5:84:59:06:5a:a9:30:6e:e2:aa:c5:d6:bb: a6:e4:d7:ce:c6:99:b5:db:0e:d9:49:c6:96:80:03: 5a:24:e5:ec:59:b4:78:f1:5b:ed:59:29:d7:7c:89: 22:d8:a8:16:63:3f:8d:f0:c7:1f:98:83:62:e6:5d: 67:fb:6c:f7:31:2b:9c:42:7e:6f:34:5d:b0:09:cd: f8:7c:85:f9:c6:ab:6a:ec:fe:5e:09:52:29:fb:56: 64:48:13:79:18:90:25:18:33:5a:2c:6a:08:a4:7e: 05:b0:09:bb:5e:6f:09:95:b9:ab:6c:42:39:eb:eb: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:37:A8:B3:8C:F6:CF:18:F1:58:BF:23:D8:79:93:FF:49:71:53:6E X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:64:5e:2c:27:66:82:c8:ca:37:bd:92:43:c7:e4:c7:4c:82: 70:12:5b:89:69:b5:ba:26:db:f7:da:bd:36:44:2d:e2:3f:c5: b8:84:fc:e6:86:8c:da:1a:9b:e5:5e:d5:d9:e5:c3:4e:45:1c: 5f:8c:d7:5f:ca:21:76:28:b0:09:a7:3f:f9:cc:26:ea:18:7e: 59:54:2f:d4:1c:3b:3d:e6:01:e7:6c:19:cc:13:8c:f6:80:2d: 18:60:f4:d2:6d:c7:1b:89:f1:e7:8e:fe:3b:55:85:d0:6e:c9: 4a:21:dd:42:4c:44:13:d3:10:ec:f6:db:c9:79:8a:cb:01:77: a4:d9:1f:58:9d:71:18:8e:97:30:b5:fe:1e:a8:db:8f:f0:e7: 5f:5d:fa:54:0b:ff:fc:f4:ee:27:ef:32:da:b0:6d:ba:36:27: b3:82:6c:6c:ca:91:72:cc:02:d7:98:25:44:30:71:ca:fd:bf: 07:f2:82:51:8f:e3:50:77:bd:21:11:f0:e8:c4:1f:90:5a:c0: dd:54:77:4f:f3:a3:c3:f7:42:39:3a:90:76:fa:63:2b:06:76: 44:42:fc:c5:19:ec:3c:a3:b0:8f:e1:5f:2a:1b:fe:6a:d4:a7: 4f:c3:7b:8b:76:81:30:b8:8f:98:17:66:68:7a:10:eb:b9:cb: 83:3d:0f:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjUwNTE0MTkyNDAxWhcNMjUwNTIxMTkyNDAxWjAYMRYwFAYD VQQDEw02ODI0ZWRkMS02MDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsx/Yho2Pai6z9dEFxD3W80iv19VGh61Fpjm7C4Q57vVQDoS7AwMG77NURX4P AGZxFLwvh++bPwVWOOT+zf6ZQx9zz6H2WLW2X2c4DFa4qcsZ4J3GaBd9XKS5ouDs u9bK1yopS434Ip48nrTtOk3UpXPZuTwsjh+QFrhsRrOoUTmU4+XGqjBWB6WEWQZa qTBu4qrF1rum5NfOxpm12w7ZScaWgANaJOXsWbR48VvtWSnXfIki2KgWYz+N8Mcf mINi5l1n+2z3MSucQn5vNF2wCc34fIX5xqtq7P5eCVIp+1ZkSBN5GJAlGDNaLGoI pH4FsAm7Xm8JlbmrbEI56+sH0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDo3qLOM 9s8Y8Vi/I9h5k/9JcVNuMB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDhCRS9BMkM4MjdFRTQxMEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNi YXI0VzE5d0REb25BYndVTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWZF4sJ2aCyMo3vZJDx+THTIJwEluJabW6Jtv32r02RC3iP8W4hPzm hozaGpvlXtXZ5cNORRxfjNdfyiF2KLAJpz/5zCbqGH5ZVC/UHDs95gHnbBnME4z2 gC0YYPTSbccbifHnjv47VYXQbslKId1CTEQT0xDs9tvJeYrLAXek2R9YnXEYjpcw tf4eqNuP8OdfXfpUC//89O4n7zLasG26NiezgmxsypFyzALXmCVEMHHK/b8H8oJR j+NQd70hEfDoxB+QWsDdVHdP86PD90I5OpB2+mMrBnZEQvzFGew8o7CP4V8qG/5q 1KdPw3uLdoEwuI+YF2ZoehDrucuDPQ8r -----END CERTIFICATE-----Generated at Thu May 15 15:22:44 2025 by rpki-client